REMARKS 

Claim 34-45 are all the claims pending in the application. By this amendment, 
•Applicants note that claim 34, 37, 42 and 45 have been amended. No new matter has been 
introduced by such amendments. 

Applicants would like to thank Examiner Jeremiah Avery for the courtesies extended to 
Applicants' representative during the telephone interview conducted on March 13, 2009. During 
the interview, proposed claim changes were discussed for distinguishing the claims over the 
references applied in the Office Action. In this regard, Applicants note that the claim changes 
presented herein correspond to the claim changes discussed during the interview. Applicants 
respectfully submit that the claims as amended herein are patentable over the cited prior art 
references for the reasons discussed below. 

I. Claim Rejections under 35 U.S.C. § 102(b) 

Claims 34, 36, 37, 39, 41, 42, 44 and 45 are rejected under 35 U.S.C. 102(b) as being 
anticipated by U.S. Patent No. 6,061,799 to ELDRIDGE et al. (hereinafter ELDRIDGE). 

Applicants' claims 34-36 relate to a password recovery system for re-supplying a 
password. The system comprises a communication terminal device for receiving a 
predetermined service via a network using the password and a portable recording medium for 
storing the password, the portable recording medium being coupled to the communication 
terminal device. The communication terminal device includes a controller for receiving from an 
external communication terminal device a signed data set, based on an indication for recovering 
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the password from a user of the communication terminal device when the user forgets the 
password. The external communication terminal device guarantees legitimacy of the user of the 
communication terminal device and generates the signed data set with a secret key. The 
controller outputs to the portable recording medium the received signed data sets when the 
portable recording medium is coupled to the communication terminal device. The portable 
recording medium includes a memory for storing the password and a public key corresponding to 
the secret key, and a controller for inputting from the communication terminal device the signed 
data set, judging using the public key and the signed data set whether the signed data set is signed 
by the external communication terminal device. The controller of the portable recording medium 
recovers the same password as the password stored in the memory of the portable recording 
medium when it is judged that the signed data set is signed by the external communication 
terminal device, and outputs to the recovered password to the communication terminal device. 
The controller of the portable recording medium does not recover the same password as the 
password stored in the memory of the portable recording medium when it is judged that the 
signed data set not is signed by the terminal communication device. Claims 42-44 recite related 
portable recording medium. Claim 45 recites a related method. 

In direct contrast, ELDRIDGE relates to a portable medium containing client process 
identification information. A computer system requires authentication prior to access to the 
client process identification information stored in the portable medium. The portable medium 
includes data identifying the client process and a plurality of data sets, each is associated with a 
password. One of passwords is designed as current. The computer system determines whether 
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any of the data associated with passwords matches authentication data previously stored in the 
computer system and associated with the client process. ELDRIDGE also teaches that an 
identification file 300 comprises a secret parameter 302 (see col. 4, lines 61-67 and col . 5, lines 
1-14). One of type of encryption key suitable for use secret parameter 302 is a RSA private 
encryption key, adhering to the RSA encryption standard (col. 5, lines 15-24). 

However, ELDRIDGE fails to disclose or suggest at least a communication terminal 
device that receives from an external communication terminal device a signed data set, based on 
an indication for recovering the password from a user of the communication terminal device 
when the user forgets the password, the external communication terminal device generating the 
signed data set with a secret key, as well as a portable recording medium that judges using a 
public key corresponding to the secret key and the signed data set whether the signed data set is 
signed by the external communication terminal device, recovers the same password as the 
password stored in the memory of the portable recording medium when it is judged that the 
signed data set is signed by the external communication terminal device, and outputs to the 
recovered password to the communication terminal device. 

ELDRIDGE does not contain any disclosure regarding how to recover the password when 
a user forgets the password. Rather, ELDRIDGE merely teaches how to update the public key 
component so as to be associated with the most current password. In other words, ELDRIDGE 
merely teaches that the server process 216 can again have the public key identifier associated 
with the current password for the client process 210 when the server process does not have the 
most current public key identifier associated with the client process 210. 
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Thus, in ELDRIDGE, the client process 210 determines whether the public key 
component 308B forwarded to the server process 216 was associated with the current password 
304. The client process 210 takes no further action when it is determined that the public key 
component 308B forwarded to the server process 216 was associated with the current password 
304. On the other hand, the client process 210 transmits to the server process 216 the public key 
component 308C associated with the current password 304 when it is determined that the public 
key component 308B forwarded to the server process 216 was not associated with the current 
password 304. 

In pending claims, the controller of the portable recording medium judges using the 
public key and the signed data set whether the signed data set is signed by the external 
communication terminal device, and recovers the same password as the password stored in the 
memory of the portable recording medium when it is judged that the signed data set is signed by 
the external communication terminal device, and outputs to the recovered password to the 
communication terminal device. On the other hand, the controller does not recover the same 
password as the password stored in the memory of the portable recording medium when it is 
judged that the signed data set not is signed by the external communication terminal device, and 
does not output to the recovered password to the communication terminal device. 

In other words, in ELDRIDGE, the client process 210 does NOT transmit to the server 
process 216 the public key component 308C associated with the current password 304 "when it is 
determined that the public key component 308B forwarded to the server process 216 was 
associated with the current password 304" since the server process 216 has the most current 
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public key identifier associated with the client process 210. On the other hand, in pending 
claims, the controller of the portable recording medium recovers the same password as the 
password stored in the memory of the portable recording medium "when it is judged that the 
signed data set is signed by the external communication terminal device", and outputs to the 
recovered password to the communication terminal device. 

Thus, ELDRIDGE fails to disclose any ways to recover a lost password, but merely 
discloses updating the public key component so as to be associated with the most current 
password. Thus, in ELDRIDGE, the client process 210 transmits to the server process 216 the 
public key component 308C associated with the current password 304 when it is determined that 
the public key component 308B forwarded to the server process 216 was NOT associated with 
the current password 304. 

In setting forth the rejection dated on January 21 , 2009, the Examiner asserts that the lack 
of recovery of the password is broadly interpreted by the Examiner to be disclosed by the, inter 
alia, "authorization logic responsive to one of the plurality of passwords and the secret parameter 
for allowing access by the identified client process" of ELDRIDGE. The Examiner also asserts 
that it is understood that a "pass/fail" mechanism is a facet, of an authorization procedure; thus, if 
there is a lack of proper correlation between the components, the Applicants' claim limitation of 
"the controller of the portable recording medium does not recover the same password as the 
password stored in the memory of the portable recording medium" would occur. The Examiner 
also asserts that regarding the Applicants' argument pertaining to that "ELDRIDGE does not 
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contain any disclosure regarding how to recover a password when a user forgets his password", it 
is noted that the features upon which Applicants rely are not recited in the rejected claim. 

By the present amendments, Applicants have amended claims 34, 37, 42 and 45 to make 
proper the correlation between the components recited in claims 34, 37, 42 and 45 to recite 
therein a feature regarding how to recover a password when a user forgets his password. Thus, 
Applicants submit that the pending claims are clearly distinguished over ELDRIDGE. 

Therefore, it is respectfully submitted that the features recited in Applicants' pending 
claims are not disclosed or suggested by ELDRIDGE cited by the Examiner, and thus, 
respectfully request that the U.S.C. § 102 (b) rejection be withdrawn. 

II. Claim Rejections under 35 U.S.C. § 103(a) 

A. Claims 35, 38 and 43 have been rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Eldridge in view of U.S. Patent No. 6,947,571 to Rhoads et al. (hereinafter 
Rhoads). Applicants respectfully traverse the grounds of the rejection. 

As discussed above, Applicants respectfully submit that independent claims 34 and 42 are 
patentable over the cited prior art, an indication of which is kindly requested. Applicants 
respectfully submit that Rhoads fails to cure the deficiencies of Eldridge, as discussed above, 
with respect to independent claims 34 and 42. Dependent claims 35 and 38 depend from 
independent claim 34, and dependent claim 43 depends from independent claim 42. 
Accordingly, Applicants submit that dependent claims 35, 38 and 43 are patentable at least by 
virtue of their dependency. 
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B. Claim 40 has been rejected under 35 U.S.C. § 103(a) as being unpatentable over 
Eldridge in view of U.S. Patent No. 6,820,204 to Desai et al. (hereinafter Desai). Applicants 
respectfully traverse the grounds of the rejection. 

As discussed above, Applicants respectfully submit that independent claim 37 is 
patentable over the cited prior art, an indication of which is kindly requested. Applicants 
respectfully submit that Desai fails to cure the deficiencies of Eldridge, as discussed above, with 
respect to independent claim 37. Dependent claim 40 depends from independent claim 37. 
Accordingly, Applicants submit that dependent claim 40 is patentable at least by virtue of its 
dependency. 



III. Conclusion 

In view of the above, reconsideration and allowance of this application are now believed 
to be in order, and such actions are hereby solicited. 



If any points remain in issue which the Examiner feels may best be resolved through a 



personal or telephone interview, the Examiner is kindly requested to contact the undersigned at 
the telephone number listed below. 



Respectfully submitted, 

Motoji OHMORI et al. 

/Kenneth W. Fields/ 
By; 2009.03.26 16:26:31 -04'00' 
Kenneth W. Fields 
Registration No. 52,430 
Attorney for Applicants 

KWF/krg 

Washington, D.C. 20005-1503 
Telephone (202) 721-8200 
Facsimile (202) 721-8250 
March 26, 2009 
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